Known vulnerabilities in Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-76682 | A vulnerability in the network security monitoring component of intrusion detection systems could allow an… | 8.2 High | Sep 15, 2026 |
| CVE-2026-76681 | A vulnerability in the API of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker with low… | 8.5 High | Sep 15, 2026 |
| CVE-2026-76680 | Vulnerabilities in the API of EdgeConnect SD-WAN Orchestrator could allow a remote attacker authenticated with low… | 8.5 High | Sep 15, 2026 |
| CVE-2026-76679 | Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to… | 8.6 High | Sep 15, 2026 |
| CVE-2026-76678 | A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways could allow a low-privilege… | 8.8 High | Sep 15, 2026 |
| CVE-2026-76676 | Buffer overflow vulnerabilities exist in the underlying operating system of EdgeConnect SD-WAN Gateways that could allow… | 8.8 High | Sep 15, 2026 |
| CVE-2026-76677 | A privilege escalation vulnerability exists in the API of EdgeConnect SD-WAN Gateways | 8.8 High | Sep 15, 2026 |
| CVE-2026-76675 | A command injection vulnerability exists in the command line interface of EdgeConnect SD-WAN Gateways | 9.1 Critical | Sep 15, 2026 |
| CVE-2026-76674 | Buffer overflow vulnerabilities exist in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways… | 9.8 Critical | Sep 15, 2026 |
| CVE-2026-76673 | Vulnerabilities have been identified in the API of EdgeConnect SD-WAN Orchestrator that could potentially allow an… | 9.8 Critical | Sep 15, 2026 |
| CVE-2026-76670 | Privilege escalation vulnerabilities exist in the API of HPE Networking EdgeConnect SD-WAN Orchestrator | 9.9 Critical | Sep 15, 2026 |
| CVE-2026-76672 | A vulnerability exists in the SD-WAN Orchestrator that may lead to the exposure of sensitive configuration information | 9.9 Critical | Sep 15, 2026 |
| CVE-2026-76669 | Privilege escalation vulnerabilities exist in the API of HPE Networking EdgeConnect SD-WAN Orchestrator | 9.9 Critical | Sep 15, 2026 |
Other Hewlett Packard Enterprise (HPE) products
ArubaOS (AOS) 105
Fabric Composer 98
Unknown product 71
Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central 51
AOS-CX 46
ClearPass Policy Manager (CPPM) 36
Aruba ClearPass Policy Manager 33
EdgeConnect SD-WAN Orchestrator 27
HPE Aruba Networking Wireless Operating System (AOS) 27
Aruba EdgeConnect Enterprise Software 23
Instant On 20
AOS-8 Instant and AOS-10 AP 18